This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3131312e302f32342d3332203d3e20323730393434.roa
File:                     3133382e302e3131312e302f32342d3332203d3e20323730393434.roa (raw, json)
Hash identifier:          zqLx+2JcY0KTWrGLNdwp0BRD5oRa4b9NaWrNcL7CEwg=
Subject key identifier:   96:CB:42:4B:54:72:4C:F8:FB:27:80:83:F5:B3:33:83:56:E8:93:E6
Certificate issuer:       /CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
Certificate serial:       4F050B636E6D7E926231179222D6B5B0F5062BB4
Authority key identifier: 85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3131312e302f32342d3332203d3e20323730393434.roa
Signing time:             Tue 16 Dec 2025 19:00:17 +0000
ROA not before:           Tue 16 Dec 2025 18:55:17 +0000
ROA not after:            Tue 15 Dec 2026 19:00:17 +0000
asID:                     270944
IP address blocks:        138.0.111.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl
                          rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 02:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:05:0b:63:6e:6d:7e:92:62:31:17:92:22:d6:b5:b0:f5:06:2b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
        Validity
            Not Before: Dec 16 18:55:17 2025 GMT
            Not After : Dec 15 19:00:17 2026 GMT
        Subject: CN=96CB424B54724CF8FB278083F5B3338356E893E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:ac:d3:56:45:fb:3e:bc:fc:bb:9e:a7:0d:
                    f0:25:d4:82:91:40:26:9f:2d:b6:a0:de:09:0d:cb:
                    66:cb:e0:c2:d7:dd:e8:23:c2:79:e3:55:b5:50:c2:
                    33:0e:29:82:df:c5:58:3d:c4:17:28:25:ed:b6:0b:
                    e5:0a:7b:b9:7e:46:b5:a3:b9:f9:0c:2d:6a:66:6e:
                    fd:15:00:1e:68:38:af:b0:06:bf:4e:d1:07:d5:17:
                    be:0f:9f:a5:c0:99:72:01:c2:c3:40:10:b4:cc:f7:
                    da:e2:f5:ea:01:76:1c:7f:55:e8:a8:c5:59:35:f3:
                    44:86:15:9d:89:45:3d:03:67:04:b3:29:2e:45:52:
                    ca:c7:83:da:14:5f:8b:98:76:69:ee:b5:c4:7c:db:
                    83:f8:af:85:a7:d9:3c:54:04:2c:3d:eb:01:d7:47:
                    7a:e4:82:30:f4:ed:a2:cb:d6:3c:13:37:bb:d0:be:
                    72:c5:83:a1:3f:c7:b4:82:73:0b:bc:75:21:47:8f:
                    82:b8:22:d8:0f:7b:51:e0:78:d3:3c:8c:50:ce:80:
                    3b:02:16:dc:90:17:0a:80:80:30:37:1b:4f:fa:f9:
                    8a:0a:bc:dd:f3:91:f5:6d:e9:7c:e3:f5:fa:75:55:
                    36:17:c1:20:84:07:a1:ee:e3:8c:e3:1c:0d:d7:85:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CB:42:4B:54:72:4C:F8:FB:27:80:83:F5:B3:33:83:56:E8:93:E6
            X509v3 Authority Key Identifier:
                keyid:85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3131312e302f32342d3332203d3e20323730393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:96:79:ff:44:d8:97:66:b5:f1:ef:34:4b:6e:64:71:5c:7f:
         c6:86:c4:ba:a8:cc:9a:d8:15:90:34:9c:08:ee:e5:74:52:7c:
         66:c0:a0:32:6f:36:be:7b:ad:64:4d:3a:96:59:a9:e9:e1:6e:
         6a:37:1b:56:5a:09:09:f7:b4:7e:97:67:3b:27:9f:68:79:f2:
         3f:ac:b9:41:f1:86:92:ea:a3:5e:7f:41:ab:d1:79:9e:f0:2a:
         06:8a:ad:69:5c:7a:04:7a:e0:61:93:26:29:e4:2d:1c:20:39:
         7c:e9:ab:73:47:24:3c:03:82:04:e6:aa:3c:86:cd:fd:f7:50:
         61:43:ef:66:52:a1:68:ad:b3:62:99:42:36:8a:f6:b0:44:33:
         5c:9e:e5:1d:7d:a0:00:ea:50:04:f7:a0:1d:3b:3c:ff:b8:08:
         47:58:e5:3a:a8:4e:ab:23:35:95:ee:4e:be:d2:4b:d4:60:61:
         7c:a7:41:96:ca:99:59:ea:d0:ae:98:d1:b4:0e:9d:5d:81:39:
         6b:2c:6e:7a:f4:06:d4:54:d0:10:7d:4d:e4:04:b3:a3:e2:e5:
         07:34:b9:a4:d6:7d:a6:f7:53:16:b4:2c:80:c6:6b:fe:b3:2c:
         1c:14:52:68:6a:c2:7f:89:e5:52:47:a8:9e:71:61:66:b6:5a:
         f7:b2:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:53:19 2025 by rpki-client